Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9454FFEE170A11F194002BA3DAE4EC9C.roa
File: 9454FFEE170A11F194002BA3DAE4EC9C.roa (raw, json)
Hash identifier: F1/NPg5lpvmLrl12m+p32G6RY9MQJYAm4Tj5cmINsOs=
Subject key identifier: 1F:4C:C9:13:19:AA:D8:01:BD:5C:4D:2C:36:F1:D5:82:ED:C6:DF:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9454FFEE170A11F194002BA3DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 14:09:23 +0000
ROA not before: Tue 03 Mar 2026 14:09:19 +0000
ROA not after: Fri 10 Apr 2026 14:09:19 +0000
asID: 401701
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113976 (0x1bd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 14:09:19 2026 GMT
Not After : Apr 10 14:09:19 2026 GMT
Subject: CN=69a6eb93-1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:04:59:76:39:ab:34:b2:02:d9:3b:6a:7c:
fe:d0:d7:d7:f1:da:e9:0c:26:d3:70:a6:02:98:d6:
a5:ec:51:be:f2:79:58:95:a5:b6:7c:f7:58:57:2f:
f5:91:73:91:cb:7e:8f:ef:fe:87:3d:5a:c4:cd:b7:
42:c3:f5:1c:51:70:be:8d:17:92:8d:f5:b6:68:ab:
a4:47:b2:79:b4:b9:1e:d1:b0:bf:1b:a9:d8:44:f0:
24:6c:72:b9:19:7e:ec:e4:45:4d:04:3c:ad:7e:11:
7b:7c:db:04:3b:1c:b7:c4:49:3c:c6:15:30:62:30:
21:98:cd:ae:7a:8f:96:e4:d5:bc:8c:26:78:dc:aa:
40:41:9a:dd:5f:ea:6b:fd:4f:86:8d:4c:62:b5:92:
c1:3d:79:cc:77:98:ab:4d:86:55:dd:7d:e9:4d:e8:
a1:0c:36:d2:35:2d:6e:e8:13:bd:a7:16:56:88:92:
8d:f1:e4:c5:a2:2b:91:3c:f7:f9:ff:b9:92:b8:70:
e0:a7:5d:72:c8:70:49:14:68:b5:f0:c2:b5:26:8b:
8f:0b:68:8b:3e:4e:09:55:8e:7c:54:34:33:11:a2:
74:c1:11:d0:55:4a:d3:87:ca:67:42:a1:5a:79:ae:
10:2d:51:9b:54:c2:4a:70:cd:ef:fa:6b:f4:66:6a:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:C9:13:19:AA:D8:01:BD:5C:4D:2C:36:F1:D5:82:ED:C6:DF:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9454FFEE170A11F194002BA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
35:5b:56:18:5b:4b:67:eb:ec:3a:b3:e3:b5:fc:3f:f6:4a:98:
cc:41:29:1a:59:ab:bd:fb:23:f3:27:d5:41:6b:b5:56:07:73:
36:bc:48:fa:c9:fe:57:cf:ee:de:73:94:65:c9:c8:59:81:ad:
6e:b0:22:90:60:5c:ac:e4:14:40:cb:b7:38:7f:39:f0:51:06:
d4:73:ed:ae:37:7a:52:26:a4:39:78:bd:29:89:8e:13:b8:51:
c1:f3:f7:dd:16:e7:32:be:7d:e7:5e:6f:ac:b4:89:4c:b3:09:
c1:8c:a8:7f:be:7c:d2:1a:2b:80:be:05:dc:58:17:82:a8:28:
b5:53:79:01:c2:1d:98:1c:4b:f2:af:bc:6e:63:46:70:85:53:
94:38:c2:49:91:20:7b:97:6d:6e:08:76:c3:4c:ef:ff:9d:1b:
ac:e7:4e:4d:b0:b8:2d:2c:5f:2e:02:5a:62:82:ff:18:16:72:
7c:06:df:a4:3e:ae:35:50:b7:ba:96:2a:99:2b:80:2f:4c:5c:
be:7d:23:8b:0f:4b:c0:f3:f7:40:62:14:7a:73:07:1a:6e:41:
22:ae:a6:d5:a8:36:59:b1:03:eb:77:0e:ff:c6:90:36:f3:3a:
ee:21:e2:e5:ab:64:08:28:fe:d5:74:c8:6b:35:be:ae:55:8a:
e3:d0:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:16:51 2026 by rpki-client